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Top Stories 

• PSE&G reported that two power outages in New Jersey’s Bergen and Hudson counties that 
left thousands without power were both caused by upgrade work at a switching station. - 
News 12 New Jersey (See item 1) 

• The U.S. Nuclear Regulatory Commission granted approval for the restart of the Fort 
Calhoun Nuclear Station near Omaha, Nebraska, which has been idled since April 20 11.— 
Omaha World Herald (See item 6) 

• Researchers identified a new ATM trojan that targets machines developed by a major ATM 
manufacturer and can steal payment card information and perform other tasks. - Softpedia 
(See item 9) 

• A gunman opened fire on the third floor of the Renown Regional Medical Center in Reno, 
Nevada, killing himself, another individual, and injuring two others. - CNN (See item 17 ) 
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Energy Sector 



1. December 17, News 12 New Jersey - (New Jersey) PSE&G explains multiple power 
failures after two widespread outages in a week. PSE&G reported that two power 
outages in Bergen and Hudson counties that left thousands without power December 13 
and December 16 were both caused by upgrade work at a switching station in 
Ridgefield. 

Source: http://newiersev.newsl2.com/news/pse-g-explains-multiple-power-failures- 
after- two- widespread-outages-in-a- week- 1 .6631232 

2. December 17, Pueblo Chieftain - (Colorado) Panel approves $70M power plant for 
Black Hills. The Colorado Public Utilities Commission December 17 approved a 
multiyear power plan created by Black Hills Energy that includes $70 million for a new 
turbine at the company’s power plant near Pueblo that will add 40 megawatts of power 
to compensate for the closure of the Canon City coal-fired plant. 

Source: http://www.chieftain.com/news/pueblo/2115230-120/black-hills-power-turbine 

3. December 17, Associated Press - (California) EPA: Chevron violated law at 
California refinery. The U.S. Environmental Protection Agency stated December 17 
that Chevron Corporation failed to maintain equipment and did not respond adequately 
to several airborne chemical releases at its Richmond, California refinery. Chevron was 
cited with 62 violations of federal environmental laws found during an investigation 
prompted by an August 6, 2012 fire at the facility. 

Source: http://www.newsobserver.com/2013/12/17/3467833/epa-chevron-violated-law- 
at-california.html 

4. December 17, Cleveland Plain Dealer - (Ohio) Copper thieves sentenced to federal 
prison for conspiring to damage electrical substations. The fifth member of a copper 
theft gang that targeted several electrical substations in northeast Ohio was sentenced to 
2 years in prison December 17. A total of six defendants who pleaded guilty were 
ordered to pay a total of $242,626 to cover the cost of repairs. 

Source: 

http://www.cleveland.com/metro/index.ssf/2013/12/copper thieves sentenced to fe.ht 
ml 

For another story, see item 6 
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Chemical Industry Sector 

5. December 17, Victorville Daily Press - (California) 600-gallon acid spill forces 
evacuation at Hesperia truck stop. A semi-truck transporting 4,800 gallons of 
hydrochloric acid leaked approximately 600 gallons of the solution from a faulty valve 
underneath the tank December 16 at a truck stop in Hesperia, some of which leaked 
into a nearby storm drain. Emergency personnel evacuated approximately 200 people 
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from the truck stop, which remained closed for several hours while the spill was 
cleaned up. 

Source: http://www.vvdailvpress.com/articles/hesperia-44138-spill-stop.html 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

6. December 18, Omaha World-Heralcl - (Nebraska) Long-idled Fort Calhoun nuclear 
plant gets green light to restart. The U.S. Nuclear Regulatory Commission granted 
approval December 17 for the Omaha Public Power District to restart the Fort Calhoun 
Nuclear Station near Omaha, which has been idled since April 2011 due to flooding on 
the Missouri River and several safety violations discovered in later inspections. 

Source: http://www.omaha.com/article/20131217/NEWS/131218891 

[ Return to top ] 

Critical Manufacturing Sector 

7. December 17, Fort Smith Southwest Times Record - (Arkansas) Fire damages Van 
Buren wiring plant. A fire caused damage and an evacuation at the Bekaert wiring 
plant in Van Buren December 16. Firefighters believed that ventilation above a vats 
system may have overheated and caused the fire. 

Source: http://swtimes.com/news/fire-damages-van-buren-wiring-plant 

8. December 17, U.S. Department of Labor - (Ohio) U.S. Department of Labor’s 
OSHA cites Grand Rock Co. after worker has fingers amputated by unguarded 
machine. The Occupational Safety and Health Administration cited Grand Rock Co., 
with one willful and one serious safety violation at its Painesville automotive 
manufacturing facility after a worker lost four fingers in a June 12 accident. Proposed 
fines totaled $52,500. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25266 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

9. December 18, Softpedia - (International) Skimmer trojan targets ATMs made by 



- 3 - 



one of the world’s largest manufacturers. Researchers at Doctor Web identified a 
new ATM trojan dubbed Trojan.Skimmer.18 that targets machines developed by a 
major ATM manufacturer. The trojan is spread by an infected application, captures 
payment card information, and allows criminals to collect the data and perform other 
functions on an ATM using a master card. 

Source: http://news.softpedia.com/news/Skimmer-Troian-Targets-ATMs-Made-by- 
Qne-of-the-World-s-Largest-Manufacturers-410249.shtml 

10. December 17, SC Magazine - (International) Report: In 2013, more than one million 
U.S. computers were infected with banking trojans. Symantec released a report 
December 17 which found that more than 1 million computers in the U.S. were infected 
with banking malware during the first three quarters of 2013, the most of the countries 
included in the report, among other findings. 

Source: http://www.scmagazine.com/report-in-2013-more-than-one-million-us- 
computers-were-infected-with-banking-troians/article/326054/ 



[ Return to top ] 

Transportation Systems Sector 

11. December 18, Long Island Newsday - (New York) Sunrise reopens in Bellmore after 
tanker explosion. A portion of the Sunrise Highway in Bellmore was closed for nearly 
12 hours after a semi-truck allegedly struck a car from behind before overturning, 
spilling about 7,000 gallons of gasoline onto the roadway. The crash and subsequent 
explosion injured 2 people and damaged 4r homes, 1 business, and an undetermined 
number of parked vehicles in the surrounding area. 

Source: http://www.newsdav.com/long-island/nassau/sunrise-reopens-in-bellmore- 
after-tanker-explosion- 1 .663248 1 

12. December 18, WWSB 7 Sarasota - (Florida) Dump truck hits overpass in North 
Port, closes 1-75 southbound to traffic. A dump truck struck and damaged an 
overpass over Interstate 75 December 18 in North Port, forcing all southbound lanes to 
be closed for inspection and repairs. The Florida Highway Patrol anticipated the 
closure would last 24 to 48 hours. 

Source: http://www.mvsuncoast.com/news/local/dump-truck-hits-overpass-in-north- 
port-closes-i-/article 1 2264ddc-67e7 - 1 1 e3-b367 -00 1 9bb30f3 1 a.html 

13. December 18, WECT 6 Wilmington - (North Carolina) Injured passengers released 
from hospital; ferry still stuck in sand. A Bald Head Island Limited ferry struck a 
sandbar December 17 near Battery Island, injuring 13 people. Attempts by the Coast 
Guard to re-float the boat were unsuccessful, placing the burden on the company to 
develop a salvage plan. 

Source: http ://w w w . wect .com/storv/242403 1 9/injured-pas sengers -released-from- 
hospital-ferry-still-stuck-in-sand 

For another story, see item 5 
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Food and Agriculture Sector 

14. December 17, Food Poisoning Bulletin - (National) Bee International, Inc. of Chula 
Vista, Ca. recalls 2oz. packages of candy Sweet Spots. California-based Bee 
International Inc. December 16 expanded its recall of 2 ounce packages of candy 
“Sweet Spots” due to undeclared egg protein. A U.S. Food and Drug Administration 
investigation indicated that a temporary breakdown in the production and packaging 
processes led to the issue. 

Source: http://foodpoisoningbulletin.com/2013/sweet-spots-recall-expands/ 

15. December 17, Food Poisoning Bulletin - (National) Del Campo Papa Seca recalled 
for undeclared sulfites. December 13 Megabusiness LLC recalled 14 ounce packages 
of Del Campo Papa Seca / Dry potato due to undeclared sulfites, found during routine 
sampling by the New York State Department of Agriculture and Markets Food 
Inspectors and subsequent analysis by the Department’s Food Laboratory personnel. 
The product was sold by retailers in Connecticut, Illinois, New Jersey, and New York. 
Source: http://foodpoisoningbulletin.com/2013/del-campo-papa-seca-recalled-for- 
undeclared-sulfites/ 
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Water and Wastewater Systems Sector 

16. December 16, Topeka Capital-Journal- (Kansas) Topeka sewage pump failure 
pollutes Kansas River. A sanitary sewer pump in Topeka failed over the December 
14-15 weekend, discharging an unknown amount of sewage into the Kansas River. The 
city’s Water Pollution Control Division began monitoring the river for E coli and 
notified State authorities and potentially-affected local authorities. 

Source: http://cjonline.com/news/2013-12-16/topeka-sewage-pump-failure-pollutes- 
kansas-river 

T Return to top i 

Healthcare and Public Health Sector 

17. December 17, CAW - (Nevada) One person, gunman dead in shooting at Reno 
medical building. A gunman opened fire on the third floor of the Renown Regional 
Medical Center in Reno December 16, killing himself, another individual, and injuring 
two others. 

Source: http://www.cnn.com/2013/12/17/us/reno-hospital-shooting/ 
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Government Facilities Sector 



18. December 17, WHAM 13 Rochester - (New York) Police ID victim killed in collision 
with school bus. A man died after he lost control of his car and crashed into a school 
bus in Murray December 17. The bus driver and four students were taken to the 
hospital for minor injuries. 

Source: http://www.13wham.com/news/features/top-stories/stories/one-dead-five- 
iniured-kendall-school-bus-crash-8168.shtml 

19. December 17, Bangor Daily News - (Maine) Bomb threat causes evacuation of 
Sullivan high school. Sullivan High School in Maine was evacuated for about 3 hours 
December 17 when a written bomb threat was found inside. The building was cleared 
for reentry following a sweep of the school by bomb sniffing dogs and classes resumed. 
Source: http://bangordailvnews.com/2013/12/17/news/down-east/sullivan-high-school- 
evacuated-due-to-bomb-threat/ 

20. December 17, WAND 17 Decatur - (Illinois) Firefighters investigating an explosion 
on University of Illinois campus. Firefighters responded to an explosion at an 
unoccupied building on the University of Illinois campus December 17. A gas leak 
was discovered at the scene and University Avenue between Goodwin and Lincoln was 
closed during the investigation. 

Source: http://www.wandtv.com/story/24241108/firefighters-investigating-an- 
explosion-on-university-of-illinois-campus 

21. December 17, Bergen County Record - (New Jersey) Students evacuated from 
Elmwood Park school due to foul odor. Gantner Avenue School in Elmwood Park 
was evacuated and students were transported to a nearby recreation center after 
detection of a foul odor in the school. Students remained at that location for several 
hours while the fire department continued to investigate the odor. 
Source: http://www.northjersey.com/news/236240501 Students evacuated from Elm 
wood Park school due to foul odor.html 

T Return to top i 

Emergency Services Sector 

22. December 17, Associated Press - (California) 11 injured in oven door blast at 
California jail. An oven door blew off while inmates were baking at the San Francisco 
Bay Area jail in California December 16, injuring 11 inmates, 1 critically. 

Source: http://www.vcstar.com/news/2013/dec/17/multiple-iniuries-in-fire-at- 
california-jail/ 
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Information Technology Sector 

23. December 18, Softpedia - (International) CERT Poland warns of DDoS botnet 
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targeting Windows and Linux machines. Researchers at Poland’s Computer 
Emergency Response Team (CERT Polska) discovered a new distributed denial of 
service (DDoS) botnet designed to infect systems running Windows and L inux 
operating systems and that can be used to perform four types of DDoS attacks. 

Source: http://news.softpedia.com/news/CERT-Poland-Wams-of-DDQS-Botnet- 
T argeting-W indows-and-Linux-Machines-4 10223. shtml 

24. December 18, Softpedia - (International) Experts analyzed DGA.Changer malware 
served in PHP.net attack. Seculert researchers analyzed the DGA.Changer malware 
that was used in an October attack on PHP.net servers and found that its ability to 
change it Domain Generation Algorithm (DGA) seed can make it extremely difficult to 
detect, among other findings. 

Source: http://news.softpedia.com/news/Experts-Analvzed-DGA-Changer- 
Malware-Served-in-PHP-net- Attack-4 10551. shtml 



25. December 18, Threatpost - (International) New DDoS hot has a fancy for ferrets. 
Researchers at Arbor Networks identified a new piece of distributed denial of service 
(DDoS) malware dubbed Trojan. Ferret equipped with a number of obfuscation and 
self-preservation capabilities. 

Source: http://threatpost.com/new-ddos-bot-has-a-fancy-for-ferrets/103226 

26. December 18, SC Magazine - (International) Apple’s Mavericks OS release comes 
with Safari browser patches. Apple included several patches for its Safari browser in 
its recent release of the Mavericks operating system, closing eight arbitrary code 
execution flaws and one credential disclosure issue. 

Source: http://www.scmagazine.eom//apples-mavericks-os-release-eomes-with-saf ari- 
browser-patches/article/326270/ 

For another story, see item 10 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

27. December 17, WLEX 18 Lexington - (Kentucky) Two arrested in Powell County 
copper theft. Two individuals were arrested December 16 by Powell County deputies 
for allegedly stealing wire from telephone poles for copper, causing more than $10,000 
in damage. 

Source: http://www.lexl8.com/news/two-arrested-in-powell-countv-copper-theft 
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Commercial Facilities Sector 

28. December 17, Sacramento Bee - (California) Sacramento police say suspicious 
package at motel was electronic equipment. Police responded to a Motel 6 in 
Sacramento and evacuated the location for several hours after a worker discovered a 
suspicious object. After examination by the departments explosive ordinance disposal 
unit it was determined to be a piece of electronic equipment 

Source: http://www.sacbee.com/2013/12/17/6009256/sacramento-police- 
investigate.html 

29. December 18, WTVR 6 Richmond - (Virginia) Worker hurt in Hanover explosion. A 
man was injured December 18 in Hanover, Virginia, when an explosion occurred at a 
warehouse leased by a construction company. The man was sent to the hospital and the 
cause was still under investigation. 

Source: http://wtvr.com/2013/12/18/hanover-building-explosion/ 

For another story, see item 5 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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